On 12/19/2017 11:27 PM, Max DiOrio wrote:
Hey Jakub,

I sent a response almost immediately - which is why I followed up when I
hadn't heard back.  You guys normally respond quickly.

The log files are available here.  I attached them last time - maybe
that was the problem?
https://drive.google.com/open?id=1ht1Hf0RxzoOMQPZUUTUARM3R_tYEEYA_

We're using 1.15.2 of sssd.  Thanks!

I'm sorry for the delay, the reply have not reached us.

I believe you have a typo in the sudoHost attribute of your rule:

netgroup DevTestLinuxServer matches (la-1dglsesgap01.internal.ieeeglobalspec.com|la-1dglsesgap01, , ): false @ netgr_matches() ./match.c:1139

netgroup DevTestLinuxServers matches (la-1dglsesgap01.internal.ieeeglobalspec.com|la-1dglsesgap01, , ): true @ netgr_matches() ./match.c:1139

Shouldn't your netgroup name in the failing rule be also in plural -- DevTestLinuxServers?


Max



On Tue, Dec 19, 2017 at 5:16 AM, Jakub Hrozek <[email protected]
<mailto:[email protected]>> wrote:

    On Mon, Dec 18, 2017 at 11:11:25PM +0000, Max DiOrio wrote:
    > Hey guys? Any thoughts on this? It's impacting our production environment.
    >
    > Thanks!

    I think Pavel's reply must have missed you, I think we still need the
    logs he requested:

    
https://lists.fedorahosted.org/archives/list/[email protected]/message/4BMTOMUM4DNDFV3KSWSSPLLKLLM2IX7R/
    
<https://lists.fedorahosted.org/archives/list/[email protected]/message/4BMTOMUM4DNDFV3KSWSSPLLKLLM2IX7R/>
    _______________________________________________
    sssd-users mailing list -- [email protected]
    <mailto:[email protected]>
    To unsubscribe send an email to
    [email protected]
    <mailto:[email protected]>




_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

_______________________________________________
sssd-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to